yeshuaismessiah.org
Issued by R3
About this certificate
This digital certificate with serial number 03:c4:e6:3f:54:3e:50:c3:49:a9:68:c0:d5:93:51:60:e6:38 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=yeshuaismessiah.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:c4:e6:3f:54:3e:50:c3:49:a9:68:c0:d5:93:51:60:e6:38Serial Number (int): 328338252974176844795404632875658849084984
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 75:78:f2:0e:28:02:bc:8a:bd:a9:0d:7e:62:92:5b:41:5a:1d:e6:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7f:0a:2d:89:a3:a3:25:22:c0:46:9c:31:e9:a3:47:c7:b3:e1:e1:32
Fingerprint (sha256): a2:d3:10:f6:70:eb:e6:9b:56:78:74:b8:bf:bf:8e:3b:43:d1:56:9d:e5:d7:49:d1:a9:d0:4d:02:01:f9:45:e1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate yeshuaismessiah.org
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for yeshuaismessiah.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agisongs.com
aryehcarter.com
flyovercarpet.com
graciousfaith.org
ironlighthouse.net
livevocals.com
luongolaw.com
ostomatesandfriends.com
privateinvestingclub.com
techozen.org
thaiswe.com
wellstar.com
westjordan.net
yeshuaismessiah.org
aryehcarter.com
flyovercarpet.com
graciousfaith.org
ironlighthouse.net
livevocals.com
luongolaw.com
ostomatesandfriends.com
privateinvestingclub.com
techozen.org
thaiswe.com
wellstar.com
westjordan.net
yeshuaismessiah.org
Other certificates including the domain name yeshuaismessiah.org
(limited to 100 certificates)
yeshuaismessiah.org
p-p.co.za
yeshuaismessiah.org
xbone.co.za
blackpanther.fund
museumofthe.bible
purcahse.ogden.gold
www.yeshuaismessiah.org
the-running-paramedic.org
medicalapartheid.org
yeshuaismessiah.org
lastortillas.ca
www.yeshuaismessiah.org
www.yeshuaismessiah.org
www.businesscredit.ninja
www.yeshuaismessiah.org
saintflanaganinstitute.org
www.yeshuaismessiah.org
connectforvip.com.yeshuaismessiah.org
p-p.co.za
yeshuaismessiah.org
xbone.co.za
blackpanther.fund
museumofthe.bible
purcahse.ogden.gold
www.yeshuaismessiah.org
the-running-paramedic.org
medicalapartheid.org
yeshuaismessiah.org
lastortillas.ca
www.yeshuaismessiah.org
www.yeshuaismessiah.org
www.businesscredit.ninja
www.yeshuaismessiah.org
saintflanaganinstitute.org
www.yeshuaismessiah.org
connectforvip.com.yeshuaismessiah.org
Certificate
The complete raw certificate details for yeshuaismessiah.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISA8TmP1Q+UMNJqWjA1ZNRYOY4MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcyMzAxMjZaFw0yNDA3MjYyMzAxMjVaMB4xHDAaBgNVBAMT E3llc2h1YWlzbWVzc2lhaC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwj49/evR8AZdtcYpau7O1Co8N1FvP2CE7U8WbuvfruY7ivqQGvxCQ0icv WO2cJsbtyZwdVY5ZS+o2Txic5VKuQbNx/mrGHDrbv0ATcQF50Z3rO6BjnNJKn0Y4 7IFwnBQgFwqneUK60s5kcoppri4lgBmmFqqKzGuOAfaWPziPyv8v+4vhkSPxn5HT xLNfzcfP8/Y5FK3GbSaJoqG09MUzJX8hBZZU3theh3g13b9Eyd1X0X7lkg9GWvnS juNJHDzs4deiCiZ5RClou5LFk20cC1J0MS32uibGAhHFaW9y/1hd2EUqCqaZ5oYn HjW9q+gZuiGSc32dk1P7x1Ld8bQXAgMBAAGjggL8MIIC+DAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFHV48g4oAryKvakNfmKSW0FaHeZIMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIBBAYDVR0RBIH8MIH5ggxhZ2lzb25ncy5jb22CD2FyeWVoY2FydGVy LmNvbYIRZmx5b3ZlcmNhcnBldC5jb22CEWdyYWNpb3VzZmFpdGgub3JnghJpcm9u bGlnaHRob3VzZS5uZXSCDmxpdmV2b2NhbHMuY29tgg1sdW9uZ29sYXcuY29tghdv c3RvbWF0ZXNhbmRmcmllbmRzLmNvbYIYcHJpdmF0ZWludmVzdGluZ2NsdWIuY29t ggx0ZWNob3plbi5vcmeCC3RoYWlzd2UuY29tggx3ZWxsc3Rhci5jb22CDndlc3Rq b3JkYW4ubmV0ghN5ZXNodWFpc21lc3NpYWgub3JnMBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAGZgQcQnw1lIuMIDSnj9ku4Nu KMz5D1KO7t/OSj8WtMoAAAGPIgGtlgAABAMARjBEAiBpqdSYLUOz8qwlgfh3ulKW 74+XN8z8uQivOXzh4//9AAIgRebLLmtzlR/VYJ8syVczb8GVSFvJPuv7GXXKAYQg RrwAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY8iAa14AAAE AwBHMEUCIQD6JXpyLz6Z8+rZSZ+AKScgDbmaOBNaCvZ9sOIvq1rkoAIgcR9nEQPB Hy7NLireIKjUQK1fuKKfQF2HNBhJECFNmjwwDQYJKoZIhvcNAQELBQADggEBAC9T 7THrv6/SrtEvLN/rEcJADSnV8gaGWQn15311f/MExnx3hIntc5gT3lNanAO4sWrz 3NHVTwiCrJLLjJIqnN7ACxukzqWZe4jCDcsx8PBWDBDG2u+nDXEMbLDCzrS7BSFW 1/Val5p1biR2ny+TYk0fC/LBsBMcnox+fZQhEc7OzrLFPmNkUSgxD/TrmOQQdeMd 8zexXAUF+M8jTPHEezUI8njAxME2GjAtxsSyhBQ7bYm/fN1o7KrlGQRrti0c63VC HoeMRm8n5B0+wXJidrE2a1I3kaCYaYckQsyJfwUDxJ8MWJDFuyE0LssuFcG3O7/U FmAekqS38vLCQJn3WDA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+Pf3r0fAGXbXGKWruz tQqPDdRbz9ghO1PFm7r367mO4r6kBr8QkNInL1jtnCbG7cmcHVWOWUvqNk8YnOVS rkGzcf5qxhw6279AE3EBedGd6zugY5zSSp9GOOyBcJwUIBcKp3lCutLOZHKKaa4u JYAZphaqisxrjgH2lj84j8r/L/uL4ZEj8Z+R08SzX83Hz/P2ORStxm0miaKhtPTF MyV/IQWWVN7YXod4Nd2/RMndV9F+5ZIPRlr50o7jSRw87OHXogomeUQpaLuSxZNt HAtSdDEt9romxgIRxWlvcv9YXdhFKgqmmeaGJx41vavoGbohknN9nZNT+8dS3fG0 FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328338252974176844795404632875658849084984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 23:01:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:01:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yeshuaismessiah.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22288734014246700940123929922663487921346004351472590189431209585380168164693697459902085503392152885007216926690917040027017460000506959295567153466948727703490939292808600205937352884273014117755923632713819399296224866223350443664940461061856784890388007771860634980441757232124308738376044923905435186095980710311467950964952374163203939989508544213132039926833613482415011989203023494196444017323445766161197338019759746054278536605603301335437656901307662179648399927994001276724136646757066108720352681404535946674828090549640695357267078679626318395582358011578012723665001015919814899091657832198035762951191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7578f20e2802bc8abda90d7e62925b415a1de648 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agisongs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aryehcarter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyovercarpet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciousfaith.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironlighthouse.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livevocals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luongolaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomatesandfriends.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestingclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techozen.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaiswe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westjordan.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeshuaismessiah.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f2201ad960000040300463044022069a9d4982d43b3f2ac2581f877ba5296ef8f9737ccfcb908af397ce1e3fffd00022045e6cb2e6b73951fd5609f2cc957336fc195485bc93eebfb1975ca01842046bc0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2201ad780000040300473045022100fa257a722f3e99f3ead9499f802927200db99a38135a0af67db0e22fab5ae4a00220711f671103c11f2ecd2e2ade20a8d440ad5fb8a29f405d8734184910214d9a3c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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